THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-j2vp-f2pv-5rj4 (medium) — Statamic: Unsafe method invocation via Antlers template resolution allows data destruction

[GHSA] GHSA-j2vp-f2pv-5rj4 (medium) — Statamic: Unsafe method invocation via Antlers template resolution allows data destruction

medgithub_advisoriesPublished 2026-08-06

GHSA-j2vp-f2pv-5rj4 Severity: medium CVE: CVE-2026-64663

Statamic: Unsafe method invocation via Antlers template resolution allows data destruction

### Impact

Manipulating user-supplied input incorporated into Antlers templates could result in the loss of content and assets.

Exploitation requires a site to have templates that pass untrusted input into affected areas. It does not require authen

MITRE ATT&CK techniques

Data DestructionT1485

Indicators of compromise

CVE-2026-64663cve

Original source: https://github.com/advisories/GHSA-j2vp-f2pv-5rj4